$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa File: 40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa (raw, json) Hash identifier: tEcBC5UwvoH9t2m6FhzXejsK3RwdCH3VfRbPlSlCLtM= Subject key identifier: 87:44:05:41:98:A1:ED:52:F1:60:D3:20:72:7C:C8:49:62:1F:0D:CE Certificate issuer: /CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Certificate serial: 010D0C9F4328584BBB759A061F2E0EEFF1636C08 Authority key identifier: 5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 35972 IP address blocks: 23.130.236.0/24 maxlen: 24 2602:f76d::/36 maxlen: 36 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9a:06:1f:2e:0e:ef:f1:63:6c:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2da4b7dc-6e43-4290-86d6-84e81139f164 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=1b54fea9-fb3c-4594-99dd-a4db0a6f76a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:66:f1:b0:6f:14:bb:80:ef:ed:6f:09:0d:2c: bb:df:25:3d:82:ad:e7:f6:2a:64:cd:d6:ec:dd:d4: 94:26:4b:a8:f7:20:a4:9a:f4:c3:1f:e9:90:16:bb: d8:8d:30:54:b0:e8:81:96:e1:d6:25:f8:91:bd:76: 50:6c:9c:a5:76:a5:ad:56:cd:6c:17:86:33:10:24: c9:39:85:a2:ee:18:1b:09:91:ce:e7:75:93:96:dd: 83:cb:d0:e3:16:a8:d2:0d:d8:32:45:81:ed:d1:3b: 46:54:3b:5b:1d:d8:3c:54:1c:47:be:3a:72:53:d3: 74:10:0f:07:e4:84:2a:e8:0e:d0:c6:1b:0b:52:de: ce:2c:bb:90:f0:2d:d5:91:51:1e:d6:44:2f:17:05: 88:6f:28:5b:80:aa:ce:fe:38:17:90:62:30:37:bc: 7a:4b:6d:b3:5e:5d:25:91:ae:fb:3b:62:65:6f:8b: d5:a2:d6:ba:fb:3c:b0:09:3f:d9:6b:81:3b:38:5d: f1:11:86:40:45:24:bd:ca:18:06:85:c0:9f:5e:b1: 7a:d1:53:cf:4c:39:45:d9:d0:11:35:c4:fb:77:0a: 92:51:ba:43:64:f7:7b:41:53:de:ab:e3:21:24:14: 51:80:d6:ed:b0:44:13:bc:05:b3:17:57:3f:f8:21: 2f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:44:05:41:98:A1:ED:52:F1:60:D3:20:72:7C:C8:49:62:1F:0D:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/40f1be3b-21ab-3e0d-bb91-c7c31dde04b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164/2da4b7dc-6e43-4290-86d6-84e81139f164.crl X509v3 Authority Key Identifier: keyid:5A:2D:E2:5F:49:C9:A9:97:CE:89:B2:57:BE:A4:1F:20:8E:0E:2E:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/2da4b7dc-6e43-4290-86d6-84e81139f164.cer sbgp-ipAddrBlock: critical IPv4: 23.130.236.0/24 IPv6: 2602:f76d::/36 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:e5:92:2e:95:1a:77:fb:65:ba:c9:c3:47:af:f4:b1:f1:0e: c8:8e:32:51:dd:0f:dc:70:5c:1f:a9:de:9d:d2:32:37:9e:68: 40:f5:93:12:bc:2f:80:a9:6f:1b:2a:57:67:0d:84:19:8b:34: a1:c8:0f:2a:2c:4b:b7:77:01:09:8a:0b:a8:68:b0:6e:2d:21: 50:79:58:ec:9b:20:3c:ad:b8:5a:1e:3b:04:d6:05:b3:d0:2f: 57:bd:93:c3:d2:5b:fe:a7:c5:72:a4:e5:e2:06:39:0a:22:22: 84:2a:2a:cf:1c:52:11:18:57:4e:a6:c5:ba:10:38:b5:74:36: bf:dd:01:b3:fb:d1:b9:47:d3:3f:da:48:24:79:c1:4b:11:8a: 7f:65:64:df:ef:36:0c:23:f3:9f:ac:de:f9:f2:86:7b:99:b5: 24:0b:96:0b:ec:47:c0:c3:15:10:54:e0:33:35:8d:fd:fd:c4: 97:bf:8b:a8:50:18:ad:61:aa:47:34:de:c0:0f:e3:43:56:e2: 18:ca:a8:f0:36:1a:a0:fb:8c:ba:b7:71:46:3f:17:2f:ce:5d: d4:99:61:50:b8:11:91:97:52:e4:ab:50:61:01:92:ff:37:e0: c2:34:e0:80:8b:99:66:fd:07:29:50:84:ce:88:7e:1d:f1:2d: 14:95:49:8d -----BEGIN CERTIFICATE----- MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEu7dZoGHy4O7/FjbAgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmRhNGI3ZGMtNmU0My00MjkwLTg2ZDYtODRlODExMzlm MTY0MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk MWI1NGZlYTktZmIzYy00NTk0LTk5ZGQtYTRkYjBhNmY3NmE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2bxsG8Uu4Dv7W8JDSy73yU9gq3n9ipkzdbs 3dSUJkuo9yCkmvTDH+mQFrvYjTBUsOiBluHWJfiRvXZQbJyldqWtVs1sF4YzECTJ OYWi7hgbCZHO53WTlt2Dy9DjFqjSDdgyRYHt0TtGVDtbHdg8VBxHvjpyU9N0EA8H 5IQq6A7QxhsLUt7OLLuQ8C3VkVEe1kQvFwWIbyhbgKrO/jgXkGIwN7x6S22zXl0l ka77O2Jlb4vVota6+zywCT/Za4E7OF3xEYZARSS9yhgGhcCfXrF60VPPTDlF2dAR NcT7dwqSUbpDZPd7QVPeq+MhJBRRgNbtsEQTvAWzF1c/+CEvowIDAQABo4IDZTCC A2EwHQYDVR0OBBYEFIdEBUGYoe1S8WDTIHJ8yEliHw3OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0 YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4MTEzOWYxNjQvNDBmMWJlM2ItMjFhYi0z ZTBkLWJiOTEtYzdjMzFkZGUwNGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02 Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMmRhNGI3ZGMtNmU0My00MjkwLTg2 ZDYtODRlODExMzlmMTY0LzJkYTRiN2RjLTZlNDMtNDI5MC04NmQ2LTg0ZTgxMTM5 ZjE2NC5jcmwwHwYDVR0jBBgwFoAUWi3iX0nJqZfOibJXvqQfII4OLs8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm Ny1iNTk5LWU5ZDBlOTgxZDliZi8yZGE0YjdkYy02ZTQzLTQyOTAtODZkNi04NGU4 MTEzOWYxNjQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQAF4LsMA4E AgACMAgDBgQmAvdtADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBt5ZIulRp3+2W6ycNHr/Sx8Q7IjjJR3Q/c cFwfqd6d0jI3nmhA9ZMSvC+AqW8bKldnDYQZizShyA8qLEu3dwEJiguoaLBuLSFQ eVjsmyA8rbhaHjsE1gWz0C9XvZPD0lv+p8VypOXiBjkKIiKEKirPHFIRGFdOpsW6 EDi1dDa/3QGz+9G5R9M/2kgkecFLEYp/ZWTf7zYMI/OfrN758oZ7mbUkC5YL7EfA wxUQVOAzNY39/cSXv4uoUBitYapHNN7AD+NDVuIYyqjwNhqg+4y6t3FGPxcvzl3U mWFQuBGRl1Lkq1BhAZL/N+DCNOCAi5lm/QcpUITOiH4d8S0UlUmN -----END CERTIFICATE-----Generated at Wed Nov 5 17:14:55 2025 by rpki-client